How to Secure a CI/CD Pipeline: A Prioritized Checklist
A prioritized, practical checklist for securing CI/CD pipelines: access control, secrets, runner isolation, dependency and action pinning, artifact signing and logging.
#slsa
Everything we have written about slsa.